Hebe | Privacy Policy

Privacy Policy & Personal Data Protection

The website www.hebecosmetics.gr is the online store for the sale of products owned by the company under the name "Hebe Cosmetics A.E." (hereinafter the Company), located in the Municipality of Thermi, on Tavaki Street, no. 6, T.K. 57001 - Thermi, Tax Identification Number 801547982, GEMI No. 158915904000., contact tel. 2310 462038, e-mail: [email protected].

The protection of privacy, personal information and data of all those who visit the website www.hebecosmetics.gr, is our priority so that you enjoy all our services with the maximum possible security. As part of this ongoing effort, we will explain below the nature, manner and purposes of the processing of your personal data we collect as well as your rights, so that your consent, where required for processing, is given before use of our services, after complete and transparent information. This Policy describes the basic Principles, warranties and purposes for which the Company collects, stores and processes your Personal Data. It concerns all those who browse this website, register a user, subscribe to the list of recipients of the site newsletters (newsletters), use our services, order / procure our products (electronic, telephone, etc.), participate in competitions and promotions Our Company, subscribe to reward programs, participate in our Company surveys, interact with our Company on social media (comments and reviews on our pages), evaluate our products or services on third party websites, etc. In the cases mentioned above, the Our company may collect and process your personal Data. The statement of acceptance of this Policy, through the completion by you of a relevant box on the websites of www.hebecosmetics.gr or otherwise, is considered as a free statement of your consent for the collection, processing and further transmission of your personal data for purposes related to the use of the website and the services provided on it, which are analyzed below. Our Company collects Personal Data that concerns you, either directly from you or through cooperating companies. The collection is done through this website and / or in other ways (social media, physical stores, competition websites, telephone orders, etc.). The processing of your Personal Data by the Company is done in accordance with the requirements of the General Regulation for Data Protection (EU) 2016/679, as supplemented by the relevant national and European legislation.

1. Basic Concepts.

"Personal Data" or "Personal Data" is any information that refers to you individuals who use this website and may disclose or lead to the identification of your identity. Indicative such information is your name, address, telephone number, etc. The "processing" of personal data is any act or series of operations carried out with or without the use of automated means in personal data or in personal data sets such as the collection, registration or organization of the structure, storage, adaptation, alteration , retrieval, search for information, use, disclosure by transmission, dissemination or any other form of disposal, correlation, combination, restriction, deletion or destruction. "Processor" means a natural or legal person, public authority, service or other entity which, alone or in conjunction with others, determines the purposes and manner of processing personal data. "Executor of processing" means a natural or legal person, public authority, service or other entity that processes personal data on behalf of the controller. "Specific Personal Data" or "Sensitive Personal Data" is any information that reveals racial or ethnic origin, political views, religious or philosophical beliefs or trade union affiliation, genetic data, biometric data, concerning the health or data relating to the natural life of a natural person or to his or her sexual orientation. "Processing" means any operation or series of operations performed with or without the use of automated means, on personal data or on personal data sets, such as the collection, registration, organization, structuring, storage, adaptation or change, retrieval, search for information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion orthe disaster. "Recipient" is the natural or legal person, public authority, service or other body to which personal data is disclosed, whether it is a third party or not. "Third party" means any natural or legal person, public authority, service or body, with the exception of the data subject, the controller, the processor and the persons who, under the direct supervision of the controller or processor , are authorized to process personal data "Restriction of processing" is the labeling of stored personal data in order to limit their processing in the future "Consent" of the data subject is any indication of will, free, specific, explicit and complete by which the data subject expresses that he agrees, by a statement or by a clear positive action, that the personal data concerning him be processed.

2. General principles of processing.

Our Company collects, stores and processes your personal data in a lawful and transparent manner for specified, express and lawful purposes and does not subject it to further processing in a manner incompatible with those purposes. The Company makes the necessary efforts so that the personal data it maintains and processes is always accurate and up-to-date but also appropriate and relevant and to limit the collection and processing to the absolutely necessary data for the purposes of processing. The data is also kept in a form that allows the identification of data subjects only for the period required for the purposes of processing personal data or for the service of other lawful purposes. Personal data shall be processed in a manner that guarantees its appropriate security, including protection against unauthorized or unlawful processing and accidental loss, leakage, interception, destruction or damage, using appropriate technical or organizational measures.

3. Processor.

Responsible for processing in the light of the legislation for the protection of personal data is the company with the name "HEBE COSMETICS A.E.", based on Tavaki Street, no. 6, T.K. 57001 Thermi, contact phone 2310 462038. For any question or request you can send an email to [email protected].

4. What personal data do we collect and process?

When you order products from the online store www.hebecosmetics.gr, the Company collects your personal information such as your name, postal address, e-mail address, your landline and mobile phone number. If you order the invoice when ordering our products, you will also be asked for the name of your Company, the profession, the tax registration number and the public financial service to which you belong. We collect this information either electronically through the relevant data entry form or by phone, when you call us to order products. In order to contact our online store through the relevant contact form, we collect and process your name and e-mail address as well as the information you enter in the relevant box (Message). At the e-mail [email protected] which you will find in the link "Job Opportunities" we collect and process the information and CV that you send us. When you submit your e-mail in the special form on our website, in order for a relevant newsletter to be sent to you, we process the e-mail address that you state to us. We collect and process your personal data (profile name, comments, tags and other information that concerns you and you share it with us) during your visit to accounts (profiles) and pages (pages) of the online store www.hebecosmetics.gr in the social networking sites (social media), such as facebook, twitter, instagram, youtube etc, when you contact us and use the services offered by the above sites to get in touch with us, submit requests, questions, reviews and obtain products and services us. To create an individual account on our website, we will process the e-mail address you enter in the relevant form and your name. For your registration in our Company competitions, you will be asked for your personal data and contact information, which our Company can draw from your account on social networking sites where the relevant competition is "running". When communicating with the CompanyIn any way (e- mail, telephone, contact forms, fax, social media, etc.), we collect and process the information you declare / enter. In case of your withdrawal from a contract with our Company, we collect and process your withdrawal statements. Your refusal to provide the personal data requested in each case, makes it impossible to provide you with the services of www.hebecosmetics.gr, communication with us, etc., and may affect the functionality of the site, slow down the your browsing and degrade the quality of your site experience. During each visit to our website, further data is automatically collected for technical reasons, such as the IP address provided by your internet access provider on your computer to connect to the internet, or information about the website you visited our site, or in relation to the internet browser you use or your operating system etc. (technical information). This technical information may, in individual cases, constitute personal data. As a general rule, we use technical data, however, only to the extent necessary for technical reasons, for the operation and protection of our website against attacks and abuse, as well as in a pseudonymous or anonymous form for statistical purposes.

5. Purposes of personal data processing.

We collect and process your personal data, especially when you visit our site, during your registration, every time you log in to an existing customer account, or when you order products. We process your personal data always bound by European and National law and this privacy policy. The above actions are performed strictly only for the provision of the services of this online store and with your explicit consent, when required, which is given by electronic means. In many cases, your personal data is used anonymously or pseudonymously to minimize the risk of leakage.

A) Visit the site

Logs When you visit the pages of this site, the following items will typically be stored for technical reasons in so-called logs:

The IP address (Internet Protocol address) of the access computer
The website from which you visit us (recommendation)
The websites you visit
The date and duration of the visit
Browser type and browser settings
The operating system

The data will be stored as a technical precaution to protect data processing systems against unauthorized access.

Use of cookies

We use the so-called cookies on our websites. Cookies are text files that allow us to make your visit to the website www.hebecosmetics.gr as comfortable as possible. This includes, for example, the default settings for the presentation of our website or shopping cart functions, as well as the possibility of a single registration, so you only need to register on our website once. Cookies contain a clear combination of letters / digits that identifies the browser you are using. These cookies are temporarily stored on your computer and are transmitted only to our server when you visit our website. We mainly use period cookies, which are not stored on your hard drive and are deleted when the browser is closed or after long periods of inactivity. You can view and delete cookies stored on your computer, and control how cookies are generally handled through your web browser settings. You can get more information in our article on Settings and Cookies Policy.

B) Use of site services and other cases

- When you register and log in, when you place an order or when you start placing an order but do not complete it, we collect, process and use the personal data and information you provide to us within the framework of applicable privacy laws. In this context, we can contact you at the e-mail address that you have already notified us with your registration and always in accordance with the consent you have given us, during registration, offering you products and services based on the information we received during your previous entries. in the online store or when trying to place your order.

- We will process the data pfor the execution of a contract with our Company, in which you are a party or to take action at your request before concluding a contract (eg when you place special orders, when you request to be informed about the availability of products in lack etc). In the context of the execution of your contract with the Company (eg purchase of our products), we process the information that you provide to us for the cross-check of your payments, the issuance of legal documents, the shipment of products to your place, your information for the delivery time and the availability of the products, the processing of your order, etc. The Company processes and transmits your data to the cooperating courier companies, in order to enable the delivery of the ordered products. The Company files the contracts with the consumers - users of this website, within the legal institutional framework. You can access them through a special link on the site. The archiving of your contracts in addition to the tax and other obligations of our Company, allows you to refer to your options and repeat your order easily and quickly. According to the provisions of the current legislation, our Company may send you a newsletter after your transaction with our online store, and you are provided with the opportunity to oppose the shipment, easily and free of charge.

- If you subscribe to the list of recipients of our Company newsletters, we process your personal data (e-mail etc) that you provide to us to send you emails about our products and services, Company news, Company events and happenings, offers, discounts and contests (newsletters).

- For "direct promotion" acts, which include any communication of the Company for the purpose of promoting our products and services within the law, in order to inform you about promotional actions, to adjust the communications or to display targeted messages through profile training, on websites social networking and third party websites.

- The personal data we collect through the relevant contact form or via e-mail, telephone, fax, social media are processed to respond to requests, questions and complaints you submit and to offer you support for our products and services. Similarly, we collect and process your personal data to respond to requests, questions, evaluations that you submit during your visit to accounts (profiles) and pages (pages) of the online store www.hebecosmetics.gr on social networking sites (social media), such as facebook, twitter, instagram, youtube etc.

- In case of your withdrawal from the contract with our Company, we will process your data for the return of your money and the receipt of the products that you return to us. Your withdrawal statements will be archived and retained without time limit in order to check if you are abusively exercising your relevant right vis-.-Vis our Company.

- For the purpose of drawing lots and communicating with the winners, we process your personal data that you disclose to us when you participate in Company competitions. - We process the CV and the information you send to the e-mail [email protected] (Job Opportunities) so that evaluating the information you provide us, we can decide whether we will proceed with your recruitment in the available job, for which you submit the your data. The decision is made with human intervention.

- The Company in the context of its activities may make automated decisions for you or make a customer profile based on your personal data that we collect directly from you or legally from other sources (preferences, interests, consumer habits). The specific actions aim at improving our services and are implemented, among other things, through targeted advertisements so that you can enjoy personalized services with speed and efficiency both for you and for our Company.

- The Company cooperates with advertising / promotion companies, courier companies, statistical analysis companies, suppliers and service providers, who process your personal data on our behalf. We transmit to our above partners only those personal data that are necessary for the provision of the service that we have agreed and exclusively for the purposes of processing mentioned in this policy.

- The Company, in compliance with the relevant provisions of the law, can process the personal data of the user for purposes of market research and marketing, as well as for the service withgoals of the Company and improvement of the services provided.

Transmission of information of our product range and special promotions and other updates

We use your data for information that you have ordered or that you have attempted to order from the product range and for other promotions from the site to the email address provided by you. You can turn off this email feature at any time. We may also use your information to send information about site promotions and special offers. You can oppose this email feature at any time. We want you to enjoy reading our emails and in order to continuously improve their content we measure and save the rates of message opening and clicks, ie if you open our emails, what is the content of the emails you open, and if and why Our emails may not have been delivered. We may also use this data for statistical purposes. Some information announcements that are necessary for the execution of the contract and the operation of the site, for example regarding services (eg confirmation of registration, information from the customer service department) or services that are subject to charges (e.g. order confirmation, regarding the contract, processing of payments) can not be deactivated. These notifications will be sent to the contact information provided by you.

C) Legality of the processing

We collect, process and store the personal data and technical information we obtain from your entry on our website, from your own telephone or e-mail or through a contact form a) only within the purpose of operation (sale of products / supply services) of this website, as well as to improve the efficiency of its operation (browsing speed, increase in traffic and sales, etc.) b) to the extent necessary to prevent or prosecute abuse or other illegal behavior in the this site, c) if we are legally obliged by a state authority such as for a formal directive or a court or other decision of the Authorities, and d) to safeguard our rights and claims, as well as for our legal defense.

6. Transfer of personal data - guarantees.

Your personal data can be transferred by our Company to cooperating companies, who as the performers of the processing on our behalf, are associated with the Company by contract, have all the responsibilities provided by law and provide adequate assurances for the application of appropriate techniques and organizational measures, so that the processing meets the requirements of the law and ensures the protection of your rights. If the processors are installed outside the EU, or the data processing is to be done outside the EU. then the transfer of your personal data takes place only: i) in a country for which there is a decision of competence by the European Commission or ii) if the controller or processor has provided appropriate guarantees and provided that enforceable rights and effective redress exist means for the data subjects or iii) in any other case provided by law. Transfer to service providers In order for the site to work and for your orders to be completed, we work with various companies such as e.g. central IT services, web hosting companies, banking companies, courier companies and transport companies, to which we transmit the necessary data for the execution of your contracts with www.hebecosmetics.gr. We also work with advertising / promotion companies, statistical analytics companies, and other suppliers and service providers, who, as the executors of the processing on our behalf, have all the responsibilities provided by law and provide adequate assurances for the implementation of appropriate technical and organizational measures. so that the processing meets the requirements of the law and ensures the protection of your rights. Some of these companies work with us as external data processing partners, and therefore use your data only in accordance with our guidelines. Therefore, we have entered into agreements with these companies to take security measures and monitor these measures on a regular basis. To the above companies cooperating with us, we transmit the absolutely necessary personal dataof our customers in order to be able to contract between us for the sale of products or the provision of services. It goes without saying that this transmission is always done with absolute security and within the framework of the actions envisaged by European and National law. In addition, we have signed contracts with the above third parties to protect your personal data. The following applies specifically to the processing of your data by third parties for the execution of your contracts:

For the delivery of goods to transport companies and postal service companies, as defined by the placement of the order.
For the payment of goods to payment service providers that you specify when placing the order. In case of payment by credit card, it is made through the payment server service provider to the partner Bank that you mention in the Payment Methods of our website. In case of payment via PayPal, it is made and processed by the company PayPal (Europe) S.àr.l. etCie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, no. Commercial Register: R.C.S. Luxembourg B 118 349. In case of payment by electronic bank deposit, it is made and processed by the Banking Institution of your choice. During the payment process, we do not record or store payment information in this transaction, such as credit card numbers or other bank or other information. You provide this information directly to your respective payment service provider only.

7. Data security.

The security of your personal data is a high priority for us. Therefore, we protect your data, which is stored with us through technical and organizational measures to effectively prevent loss or misuse by third parties. In particular, our employees, who process personal data, are committed to maintaining confidentiality. To protect your personal data, it is transmitted in encrypted form. We use, for example, the TLS = Transport Layer Security system to protect communication through your web browser. This is recognizable by the padlock displayed by your browser in the event of a TLS connection. In order to ensure the long-term protection of your data, technical security measures are regularly monitored and, if necessary, adapted to the relevant prevailing technology standards. Personal data is basically kept in electronic form. We may also keep documents in a physical file that include personal data when necessary (tax data, contracts, original declarations of withdrawal, etc.), taking the necessary protection measures. If you are in a country other than the Company's servers, communications may involve the cross-border transfer of information. We take all necessary measures for the security of this type of data transfer.

8. Duration of data storage

All personal data is kept for a predetermined and limited period depending on the purpose of processing, at the end of which, such personal data is deleted from our databases. The personal data you provide to our Company through this website or in other ways will be kept for as long as you wish to enjoy our services and related updates (eg newsletter) as above, and you can revoke at any time the your consent. In case you register at www.hebecosmetics.gr, if your account is inactive and there is no other legal condition for the processing of your personal data or a legal reason for their observance, these will be deleted three years after your last action on the website www .hebecosmetics.gr. From the moment you choose to delete your account on this site, your data will be deleted upon your request within a reasonable period and in any case within three (3) months. In case of a sales contract with www.hebecosmetics.gr, a reasonable period of retention of your personal data is five years from the completion of your last transaction with our online store. Similarly for any other use of our services after registering on the website www.hebecosmetics.gr. The time that your Personal Data can be retained by our Company is additionally determined by the relevant obligations of our Company provided in the current Legislation (tax, etc.) and the provisions of the law for the maximum retention period. If there are legal claims / claims of a civil nature of our Company from the contract, the Company may keep your personal data until the completionthe statutory limitation period of the claims. The data collected through the use of cookies are kept for 12 months from the moment you give your consent when you enter our website for the use of cookies.

9. Data Subjects Rights.

The security of your personal data is a top priority for us and for this purpose we apply the most advanced security systems and procedures for their protection and for the full and unhindered exercise of your legal rights. As part of your continuous and immediate service from us, we make sure that you are adequately informed about your rights and how to exercise them. Specifically, data subjects have the following rights:

Right to information about the processing of their personal data.
Right of access to their personal data and related to the processing and their rights, information (purposes, recipients of processing, retention time, etc.).
The right to request the correction of their inaccurate personal data as well as the completion of their incomplete personal data.
The right to request the deletion of their personal data because, inter alia, personal data are no longer necessary in relation to the purposes hereof or revoke the consent on which the processing is based or oppose the processing or the personal data have been processed illegally.
Right to request the restriction of the processing of their personal data, if they question the accuracy of the personal data or consider the processing illegal or need the data to support legal claims and the Company no longer needs them or when they object to the processing.
Right to receive their personal data and / or to request the transfer of such data to another controller (portability right).
The right to express their opposition to the processing of their personal data
The right not to be subject to a decision taken solely on the basis of automated processing, including profiling, which produces legal effects concerning them or significantly affects them in a similar way (right to human intervention).

To exercise your rights you can send a registered mail to the Company "HEBE COSMETICS A.E.", Tavaki street, no. 6, T.K. 57001 - Municipality of Thermi or e-mail at [email protected]. The Company will respond in writing (e-mail or postal letter) within 30 days of receipt of the request and identification of the applicant for the actions taken following the request. This period may be extended by a further two months, if necessary, taking into account the complexity of the request and the number of requests. The Company informs the data subject about the said extension within one month from the receipt of the request, as well as about the reasons for the delay. These rights are exercised at no cost to you. If the data subject's requests are manifestly unfounded or excessive, in particular due to their repetitive nature, the Company may either: a) impose a reasonable fee, taking into account the administrative costs of providing the information or the announcement or execution of the requested action, or b) refuse to comply with the request. In addition, in the event that one or more of the above rights are exercised to correct, delete and restrict the processing of your personal data, the relevant requests will also be forwarded to any third party recipient to whom the personal data may have been transmitted for processing purposes, except if this proves impossible or if it entails a disproportionate effort. We will provide you with all the necessary information you need to state your prior consent to the processing of your personal data by the Company, for one or more specific purposes. You can revoke your consent at any time, easily and free of charge, without prejudice to the legality of the processing based on your consent before revoking it. In cases where you are not provided with the possibility of automated revocation of your consent, contact our Company in any way and we will provide you with all the necessary information for the desired revocation. Please understand if applying your objection / revocation of consent may take some time for technical reasons and in the meantime continue to receive notifications from us. In case you believe that your personal data has been affected in any way, you can contact our Company at e-mail: [email protected]. Our Company is dipat any time at tel. 2310 462038, ready to assist you in resolving the issue in a fast, fair and efficient manner. In the alternative, you can contact the Personal Data Protection Authority, to which you can also submit a relevant complaint:

www.dpa.gr, Postal Address: 1-3 Kifissias Ave., PC 115 23, Athens, tel .: +30 210 6475600, fax: +30 2106475628, e-mail: [email protected].

10. Social Networking Links.

We offer you the so-called social plugins of various social networks. To protect your privacy, we use a technical solution for the integration of social plugins that prevents data (eg IP address) from being transmitted to social networks such as Facebook, as soon as our website opens. Only when social plugins are clicked for the first time, then they are activated. If you are a member of a social network and you click on the relevant social plugin, the social network provider may be able to link your site visit information to your network profile data. Therefore, please contact the social media operators you use for information about these features. Find out about your individual browser configuration options for how you can manage cookies and web beacons. You can get this information from your browser builder. In addition, third-party providers offer so-called browser extensions and plugins with which you can configure how your browser manages cookies and personal information. By selecting the above social networking buttons, you also provide your consent for all of the above.

11. Visiting other companies' websites.

This site may contain links to other companies' websites. We are not responsible for the data protection measures for external websites that you may access through these links. Please be informed about the protection of your data on these external websites.

12. Applicable Law.

In case of dispute or any claim regarding this website, Greek law is applicable, regardless of the type of dispute. For all actions or legal proceedings that arise or are related to this Policy, its validity, implementation, fulfillment or violation or the content of this Policy, the Greek Courts are competent, whose jurisdiction you irrevocably recognize. Notwithstanding the foregoing, the Company reserves the right to exercise its legal rights before the courts of the place of violation of this Policy.

13. Amendments to this Policy.

We always want to present to our customers attractive product offers and therefore, to constantly adapt the range of our products to the wishes of our customers. It may also be necessary to update and modify this policy in order to respond to any changes to the operation of this website, the services it provides and the provisions of the law. Therefore, we encourage you to be informed on a regular basis of any policy changes that will be posted on this website. To the extent that such modifications may affect your consent, we will keep you informed.

July 2021

Cart